VDB
CVE-2024-12380
CVE-2024-12380
PUBLISHED
CVSS 7.5 HIGH
An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.
EPSS 0.57% · 46.5th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.57%
46.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 11.5.0 |
| Bitnami | gitlab | 11.5.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Mar 12, 2025 CVE Published
- Mar 14, 2025 EPSS Score
- Mar 14, 2025 Coalition ESS Score
- Mar 28, 2025 EPSS Score
- Apr 12, 2025 EPSS Score
- Apr 26, 2025 EPSS Score
- May 11, 2025 EPSS Score
- May 25, 2025 EPSS Score
- Jun 9, 2025 EPSS Score
- Jun 16, 2025 Coalition ESS Score
- Jun 23, 2025 EPSS Score